PCNE Question 45

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C) is the most plausible solution. Misconfigured firewalls, plus project firewall policies (with higher precedence than the firewall rules) can break the communication between the nodes and the control plane. A) Does not have any impact in the connectivity with the control plane. B) A route doesn't have to be created, GKE service takes care of node setup D) The list of authorized networks is updated by the GKE service control plane. Node addresses are included by default in the list of authorized networks. Review the table in section "How authorized networks work" here https://docs.cloud.google.com/kubernetes-engine/docs/concepts/network-isolation#how_authorized_networks_work .

• Chose D1

  In a GKE private cluster, the master is not accessible from the public internet, so you need to explicitly allow access from specific networks to the Kubernetes master. You do this by adding the IP of your instance (or the subnet it belongs to) in the "Master authorized networks" section of the GKE cluster. This will allow the instance to communicate with the master over the private network.

• Chose D1

  updated the authorized networks